The lead network costs that sit outside the headline fee

Lead generation networks hide costs in ordinary tasks that never enter the supplier's headline fee. This non-ranked list names nine lead network cost categories and the typical amounts they carry, with the units and drivers behind each range.

What to take away

Method and limits

Research was completed on 5 September 2026. A category was included where a current regulator, public authority or technical standards body identified work relevant to buying, operating or leaving a data-enabled service. Entries had to be distinct, assignable and capable of affecting cash or internal resources. All figures are UK-only.

Figures below are typical UK market ranges as of 2026, not quotes. Privacy, security and accessibility specialists typically charge £400 to £900 a day, or £50 to £112 an hour. Loaded internal cost for a trained owner typically runs £25 to £60 an hour.

One fixed annual item sits outside the nine: the ICO's data protection fee is £52, £78 or £3,000 by organisation size, with a small discount for direct debit; check the current tiers on the ICO fees page.

The list excludes speculative fines, breach-loss estimates and supplier prices. It also excludes salaries, performance claims and market averages. No system, provider, invoice or control was tested. There is no affiliate funding or supplier relationship to declare. Order follows the enquiry lifecycle, not cost or importance.

1. Provenance investigation

Checking who collected a record, what the person saw and which recipient was contemplated takes time. Screening preferences adds privacy, operational and supplier effort.

The ICO's data-broker guidance for buyers says assurances alone are insufficient. Initial review typically takes 8 to 20 specialist hours, so £400 to £2,240. Monitoring by source typically adds 2 to 6 hours a month, or £100 to £670.

For example, 12 specialist hours at £50 to £112 is £600 to £1,344 for initial review. Adding 3 hours a month monitoring at the same rate is £150 to £336 a month, or £1,800 to £4,032 a year. Total first-year cost is £2,400 to £5,376.

Treat initial review as one-off and monitoring as recurring. Effort varies by source and change volume.

2. Validation and rejected records

Duplicates, out-of-area requests and missing evidence need rules and tooling. Service mismatch needs human exceptions.

Rule tooling typically costs £200 to £2,000 a month for a small buyer. Exception handling takes 5 to 15 minutes a record, so £2 to £15 at a loaded £25 to £60 an hour. At 500 rejections a month that is £1,000 to £7,500.

Record who maintains the rule version and who investigates a challenged rejection. Otherwise an apparently variable acquisition fee produces an unmeasured recurring fulfilment cost.

3. Complaint handling and correction

People need an accessible route to question data use and outcomes. The ICO's complaint guidance sets expectations around acknowledgment, investigation and response. It does not say how many complaints to expect or what they cost.

Typical internal handling runs £15 to £50 a complaint in staff time. Correcting or suppressing a record typically adds 20 to 60 minutes, or £8 to £60. Budget trained owners, evidence retrieval, replies and corrective work.

4. Recipient and contract administration

Buyer onboarding, role mapping, schedule changes, evidence expiry and removal all require control.

Onboarding and schedule work typically take 4 to 12 hours a buyer, so £200 to £1,350. The ICO's data sharing agreement guidance covers parties, purposes, stages and standards. It also covers review and termination. Qualified legal review typically costs £1,500 to £5,000, then 2 to 6 hours a year. A document does not manufacture lawful permission.

5. Security evidence and incident readiness

Supplier questionnaires, scoped evidence, access review, log checks and incident exercises need specialist hours.

Completing a supplier questionnaire typically takes 6 to 20 hours, £300 to £2,240. Cyber Essentials certification starts at about £300 plus VAT, and Cyber Essentials Plus typically costs £1,500 to £3,000 through a certification body. A penetration test typically costs £3,000 to £20,000 depending on scope.

NCSC supplier assurance questions include governance, incidents, data, testing and contractual exit. An incident exercise takes half a day to two days. The questions are a starting point, not a certification or a universal review frequency.

6. Accessibility testing and remediation

The published form is only one path. Error recovery, consent text, evidence requests and complaints also need testing with appropriate methods.

The W3C WCAG 2.2 Recommendation supplies testable criteria; conformance cannot be inferred from a template label.

An audit of up to 20 templates typically costs £2,000 to £10,000. Remediation runs £400 to £900 a day, and retesting typically adds 10 to 25 per cent of the audit fee. Count initial tests, defect repair and retest separately.

7. Credits, refunds and disputes

A credit process can consume more staff time than its headline remedy suggests. Investigating and deciding a dispute typically takes 1 to 3 hours, so £50 to £340.

Capture the defect definition, claim window, proof and decision-maker. Add the appeal, expiry and accounting treatment. Distinguish cash returned from credit against later use. Model only contractually supported amounts and timings.

8. Change and parallel operation

A new validation rule, buyer category or data field can force revised copy and mapping. Tests, training and reconciliation follow.

A rule change typically consumes 8 to 40 hours across those tasks, £400 to £4,500. Parallel running may continue while old and new records are compared, typically adding 5 to 15 minutes a record.

Classify release work as recurring or one-off according to the actual change process rather than hiding it in contingency.

9. Exit and evidence retention

Export, transfer, field mapping and suppression continuity happen after the last live enquiry. Access removal and deletion evidence follow.

Supplier export and migration work typically bills at £80 to £150 an hour for 10 to 40 hours, so £800 to £6,000. Buyer labour typically adds 8 to 30 hours.

NCSC's assurance material asks about secure return or deletion at contract exit. Price both supplier charges and buyer labour before signing, then define acceptance and rollback if an export is unusable.

For each category, record a fixed or variable label, a one-off or recurring label, and a currency and VAT basis. Add period, quantity, unit, inclusions and exclusions. Add evidence, date, owner and confidence.

Use category cost = documented external charge + approved role hours x loaded hourly cost. This blank formula provides no amount or benchmark.

Set reforecast triggers for a new source, unusual rejection pattern, material complaint or incident. Accessibility faults, contract changes and failed exports trigger one too.

Stop the relevant spend or launch stage if a legal, privacy, PECR, security or accessibility gate fails. Consumer, advertising and commercial gates stop it too. Finance can total the work; it cannot overrule those decisions.

Common questions